CVE-2026-109277

ImageMagick versions before 7.1.2-32 are vulnerable to a policy bypass via the -script operation . The root cause is a lack of checks on file descriptor handling , which allows an attacker to use the -script operation to close file descriptors that were not opened by the current operation. This a...